CVE-2025-21351

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Feb 11, 2025
CWE ID 400

Summary

CVE-2025-21351 is a newly disclosed vulnerability affecting Microsoft's Active Directory Domain Services (AD DS). This issue permits an attacker to cause a denial of service condition by manipulating specific API requests. Successful exploitation may lead to AD DS becoming unresponsive, impacting network availability and potentially disrupting business operations. Organizations using Windows Server versions 2008 and later are recommended to apply the available patch as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share